Security & Compliance
Security for your instances
DDoS protection, network isolation, and SSH-first access on every instance.
How we protect workloads
SSH-first access
Connect with SSH keys. Use the Horizon console when you need out-of-band recovery — no shared passwords on production instances.
Network Isolation
Every customer's instances run in isolated VLAN segments. Private networking is available for inter-instance communication without traversing the public internet.
Access Controls
Role-based access control, mandatory two-factor authentication for staff, hardware security keys for production access, and comprehensive audit logging.
Vulnerability Management
Continuous vulnerability scanning of our infrastructure. Critical patches prioritized and applied promptly. Regular third-party penetration testing.
DDoS Protection
Multi-layer DDoS mitigation at the network edge. Volumetric, protocol, and application-layer attacks are filtered automatically before reaching your instances.
Incident Response
Documented incident response procedures with defined escalation paths. Post-incident reports published promptly for any customer-impacting event.
Included with every instance
These protections are part of every virtual instance — whether you deploy in Rotterdam or Den Bosch.
DDoS protection
Multi-layer mitigation at the network edge filters attacks before they reach your instance.
Network isolation
Instances run in isolated network segments. Private networking keeps traffic between your VMs off the public internet.
NVMe + redundancy
Enterprise hardware, NVMe storage, redundant power, and out-of-band management at both RTM and DBS.
Monitoring & response
Infrastructure monitoring with documented incident response and post-incident communication when customers are affected.
Responsible Disclosure
Found a vulnerability? We welcome responsible disclosure. Our security team will acknowledge your report within 24 hours and work with you on remediation.
Data Processing
We offer a standard Data Processing Agreement (DPA) compliant with GDPR Article 28 to all customers processing personal data on our infrastructure.
View DPA